Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

336,839

All time

Critical · Active

10,645

CVSS ≥ 9.0

New · 14 days

1,499

Newly disclosed

Feed last synced

3 hrs ago

Data freshness

Showing 1321–1350 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2026-1582	low	3.7/10	WP All Export <= 1.4.14 - Unauthenticated Sensitive Information Exposure via PHP Type Juggling	Feb 18, 2026 4mo ago
CVE-2026-2560	medium	5.3/10	kalcaddle kodbox Media File Preview Plugin VideoResize.class.php run os command injection	Feb 16, 2026 4mo ago
CVE-2026-2553	medium	5.3/10	tushar-2223 Hotel-Management-System HTTP POST Request home.php sql injection	Feb 16, 2026 4mo ago
CVE-2026-2552	medium	5.1/10	ZenTao Editor control.php delete path traversal	Feb 16, 2026 4mo ago
CVE-2026-2551	medium	5.3/10	ZenTao Backup control.php delete path traversal	Feb 16, 2026 4mo ago
CVE-2026-2543	medium	5.1/10	vichan-devel vichan Password Change pages.php unverified password change	Feb 16, 2026 4mo ago
CVE-2026-2533	medium	6.9/10	Tosei Self-service Washing Machine tosei_datasend.php command injection	Feb 16, 2026 4mo ago
CVE-2019-25377	medium	4.8/10	OPNsense 19.1 Reflected XSS via system_advanced_sysctl.php	Feb 15, 2026 4mo ago
CVE-2019-25374	medium	5.1/10	OPNsense 19.1 Reflected XSS via vpn_ipsec_settings.php	Feb 15, 2026 4mo ago
CVE-2019-25373	medium	5.1/10	OPNsense 19.1 Stored XSS via firewall_rules_edit.php	Feb 15, 2026 4mo ago
CVE-2019-25372	medium	5.1/10	OPNsense 19.1 Reflected XSS via diag_traceroute.php	Feb 15, 2026 4mo ago
CVE-2019-25371	medium	5.1/10	OPNsense 19.1 Reflected XSS via diag_ping.php	Feb 15, 2026 4mo ago
CVE-2019-25370	medium	5.1/10	OPNsense 19.1 Reflected XSS via interfaces_vlan_edit.php	Feb 15, 2026 4mo ago
CVE-2019-25369	medium	5.1/10	OPNsense 19.1 Stored XSS via system_advanced_sysctl.php	Feb 15, 2026 4mo ago
CVE-2019-25368	medium	4.8/10	OPNsense 19.1 Reflected XSS via diag_backup.php	Feb 15, 2026 4mo ago
CVE-2026-24895	high	8.9/10	FrankenPHP affected by Path Confusion via Unicode casing in CGI path splitting allows execution of arbitrary files	Feb 12, 2026 4mo ago
CVE-2026-24894	high	8.7/10	FrankenPHP leaks session data between requests in worker mode	Feb 12, 2026 4mo ago
CVE-2026-0910	high	8.8/10	wpForo Forum <= 2.4.13 - Authenticated (Subscriber+) PHP Object Injection	Feb 11, 2026 4mo ago
CVE-2026-1235	—	—	WP eCommerce <= 3.15.1 - Unauthenticated PHP Object Injection	Feb 11, 2026 4mo ago
CVE-2026-2226	medium	5.1/10	DouPHP ZIP File file.php unrestricted upload	Feb 9, 2026 4mo ago
CVE-2026-2225	medium	6.9/10	itsourcecode News Portal Project Administrator Login index.php sql injection	Feb 9, 2026 4mo ago
CVE-2026-2224	medium	5.1/10	code-projects Online Reviewer System btn_functions.php cross site scripting	Feb 9, 2026 4mo ago
CVE-2026-2223	medium	6.9/10	code-projects Online Reviewer System index.php sql injection	Feb 9, 2026 4mo ago
CVE-2026-2222	medium	4.8/10	code-projects Online Reviewer System btn_functions.php cross site scripting	Feb 9, 2026 4mo ago
CVE-2026-2221	medium	6.9/10	code-projects Online Reviewer System Login index.php sql injection	Feb 9, 2026 4mo ago
CVE-2026-2220	medium	6.9/10	code-projects Online Reviewer System btn_functions.php sql injection	Feb 9, 2026 4mo ago
CVE-2026-2217	medium	6.9/10	itsourcecode Event Management System manage_user.php sql injection	Feb 9, 2026 4mo ago
CVE-2026-2214	medium	4.8/10	code-projects for Plugin AdminAddAlbum.php cross site scripting	Feb 9, 2026 4mo ago
CVE-2026-2213	medium	5.1/10	code-projects Online Music Site AdminAddAlbum.php unrestricted upload	Feb 9, 2026 4mo ago
CVE-2026-2212	medium	6.9/10	code-projects Online Music Site AdminEditCategory.php sql injection	Feb 9, 2026 4mo ago